Date:         Fri, 2 Oct 2009 14:29:54 -0500
Reply-To:     Troy Dawson 
Sender:       Security Errata for Scientific Linux
              
From:         Troy Dawson 
Subject:      Security ERRATA Moderate: xen on SL5.x i386/x86_64
Comments: To: "scientific-linux-errata@fnal.gov"
          

Synopsis:	Moderate: xen security and bug fix update
Issue date:	2009-10-01
CVE Names:	CVE-2009-3525

CVE-2009-3525 Xen: PyGrub missing support for password configuration command

The pyGrub boot loader did not honor the "password" option in the 
grub.conf file for para-virtualized guests. Users with access to a 
guest's console could use this flaw to bypass intended access 
restrictions and boot the guest with arbitrary kernel boot options, 
allowing them to get root privileges in the guest's operating system. 
With this update, pyGrub correctly honors the "password" option in 
grub.conf for para-virtualized guests. (CVE-2009-3525)

This update also fixes the following bugs:

* rebooting para-virtualized guests sometimes caused those guests to 
crash due to a race condition in the xend node control daemon. This 
update fixes this race condition so that rebooting guests no longer 
potentially causes them to crash and fail to reboot. (BZ#525141)

* due to a race condition in the xend daemon, a guest could disappear 
from the list of running guests following a reboot, even though the 
guest rebooted successfully and was running. This update fixes this race
condition so that guests always reappear in the guest list following a
reboot. (BZ#525143)

* attempting to use PCI pass-through to para-virtualized guests on 
certain kernels failed with a "Function not implemented" error message. 
As a result, users requiring PCI pass-through on para-virtualized guests 
were not able to update the xen packages without also updating the 
kernel and thus requiring a reboot. These updated packages enable PCI 
pass-through for para-virtualized guests so that users do not need to 
upgrade the kernel in order to take advantage of PCI pass-through 
functionality. (BZ#525149)

After installing the updatedpackages, the xend service must be restarted 
for this update to take effect.

SL 5.x

     SRPMS:
xen-3.0.3-94.el5_4.1.src.rpm
     i386:
xen-3.0.3-94.el5_4.1.i386.rpm
xen-devel-3.0.3-94.el5_4.1.i386.rpm
xen-libs-3.0.3-94.el5_4.1.i386.rpm
     x86_64:
xen-3.0.3-94.el5_4.1.x86_64.rpm
xen-devel-3.0.3-94.el5_4.1.i386.rpm
xen-devel-3.0.3-94.el5_4.1.x86_64.rpm
xen-libs-3.0.3-94.el5_4.1.i386.rpm
xen-libs-3.0.3-94.el5_4.1.x86_64.rpm

-Connie Sieh
-Troy Dawson